Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
File: UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft (raw, json)
Hash identifier: 3myhPSFb0c9s8kjiM+5WbZYvTypHPQm2PTjGTb1/l3M=
Subject key identifier: 39:3E:EF:98:D8:43:7B:1A:59:6C:36:7D:C5:10:C2:96:9A:36:7C:9D
Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
Certificate issuer: /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Certificate serial: 01969CE2C517C6665B9AD62008B8406AE378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
Manifest number: 0DFB
Signing time: Sun 04 May 2025 20:00:29 +0000
Manifest this update: Sun 04 May 2025 20:00:29 +0000
Manifest next update: Mon 05 May 2025 20:00:29 +0000
Files and hashes: 1: UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl (hash: zXidbHV2W4QAr19e67CF2AtqfjibxJcbhAM8WrvGRf8=)
2: e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa (hash: M7R6DXKCTjS+VvD5Kv8ntaZtUcFfoiyAh38NJJRxUkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:c5:17:c6:66:5b:9a:d6:20:08:b8:40:6a:e3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Validity
Not Before: May 4 20:00:29 2025 GMT
Not After : May 5 20:00:29 2025 GMT
Subject: CN=393eef98d8437b1a596c367dc510c2969a367c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:5e:be:f0:c5:f5:38:ca:95:c2:86:03:84:
23:ab:ef:7c:c0:f0:f7:36:7a:42:d1:c0:f7:4a:8a:
86:ee:a5:50:a8:7c:65:5a:43:b5:de:58:e9:a2:71:
b9:85:fc:c1:28:9e:68:ba:85:cd:74:ce:ea:d8:e6:
cb:9b:c3:9b:4e:d4:ad:e8:b1:22:a8:06:5b:5f:c7:
5d:10:23:c8:af:01:42:2a:a3:49:dc:e6:31:b8:fc:
81:79:03:75:f7:b0:4a:e4:93:c5:00:c9:2a:86:d8:
05:35:e3:cb:e0:4b:73:61:05:43:ca:e2:65:c0:b3:
53:9b:5e:e2:c2:1e:2c:f6:09:c3:44:dc:44:a9:57:
f7:65:1b:04:81:fe:c8:0e:3d:6c:c4:86:c2:1a:98:
30:35:b0:8c:76:b9:88:2f:42:50:83:45:66:47:61:
9c:85:ab:c4:52:c9:46:07:83:a8:ea:e1:9c:c5:81:
5d:2f:58:36:7e:95:7f:06:25:49:57:ba:b3:5c:12:
0f:fd:62:6d:b3:2a:b0:42:58:06:44:d6:62:ad:fd:
e9:86:44:09:56:c7:a7:e0:db:76:01:48:a4:04:f0:
d8:78:7b:f6:0d:11:01:77:7a:36:12:04:a4:d0:9f:
55:32:58:05:13:89:5d:09:af:7a:ae:4b:42:d1:7b:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3E:EF:98:D8:43:7B:1A:59:6C:36:7D:C5:10:C2:96:9A:36:7C:9D
X509v3 Authority Key Identifier:
keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:41:99:0a:9a:2d:7e:0c:1b:45:a9:a7:6d:87:03:ad:54:96:
d1:19:95:80:37:cb:a7:c5:90:e5:04:b6:cf:14:65:fc:3a:dd:
d7:60:bd:c6:87:05:1d:95:ba:89:15:32:50:8b:67:42:62:8b:
b9:f0:17:62:88:13:70:c6:d2:5a:20:13:d4:c6:05:b1:c5:f3:
d0:ac:03:14:fc:ea:7d:c2:92:ef:c1:35:f5:db:8d:a1:25:4f:
75:2c:8c:55:57:10:8a:cc:c7:eb:a8:23:51:97:da:11:2f:da:
8c:bd:0c:50:b8:28:2c:c6:50:d6:0e:f7:9b:d6:03:0a:02:24:
b8:27:2c:37:b4:75:39:fc:1d:b1:4a:13:58:54:fd:e1:7e:f8:
d4:2e:fd:d5:2d:64:25:4a:1d:56:e8:b6:8c:ee:2b:52:81:3e:
da:60:3c:41:57:e8:07:8b:2a:17:01:cc:f3:6b:34:bc:83:81:
5f:74:19:a3:02:59:e7:50:1c:66:1f:3b:39:fb:57:92:e3:56:
62:d3:8b:fe:5e:70:6b:51:a0:b6:ee:56:97:31:e9:a5:c1:8d:
b1:37:63:05:05:07:3a:54:1a:15:4a:48:62:7b:3c:db:7a:6b:
52:26:98:84:4b:94:5c:ef:a8:74:6b:3b:ee:2e:3e:cf:ae:6d:
87:4e:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 01:22:49 2025 by rpki-client